CVE Database›Document archive›CVE-2024-53136

CVE-2024-53136

kernel: mm: revert "mm: shmem: fix data-race in shmem_getattr()"

Loading…

Severity

Moderate

Red Hat Product Security

4.7

CVSS 3.1

Review impact separately from score.

Published · December 4, 2024

Updated · October 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

mm: revert "mm: shmem: fix data-race in shmem_getattr()"

Revert d949d1d14fa2 ("mm: shmem: fix data-race in shmem_getattr()") as suggested by Chuck [1]. It is causing deadlocks when accessing tmpfs over NFS.

As Hugh commented, "added just to silence a syzbot sanitizer splat: added where there has never been any practical problem".

Statement

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because successful exploitation is limited to a denial of service under specific preconditions without compromising data confidentiality or integrity. The issue causes a kernel deadlock when retrieving file status on temporary filesystems exported across NFS, a configuration uncommon in standard enterprise environments. Triggering the condition requires local user interactions within systems hosting these specific shares, significantly reducing the blast radius on typical deployments.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 4.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')